A file is local if it exists in the root folder or a subfolder

[Fil]

closes #71

[cinxmo]

thoughts on splitting this function into 2 - one for checking isLocalFile and the other for returning the pathFromRoot string? I was thinking

// A file is local if it exists in the root folder or a subfolder.
function isLocalFile(ref: string | null, root: string): boolean {
	if (typeof ref !== "string || !canReadSync(join(root, ref))) return false;
	return true;
}

function pathFromRoot(ref: string | null, root: string): string {
	if (isLocalFile(ref, root))) return join(root, ref);
	throw Error(`${ref} does not exist within the ${root} root directory`)
}

it's a little verbose but we can just use isLocalFile in src/javascript.ts

join should already normalize the paths (according to the docs)

[cinxmo]

instead of throwing an error we can just return null for pathFromRoot

[Fil]

thanks. I've applied your suggestions, still making sure that the normalized ref itself does not start with ../, otherwise it would allow to reach ../public/database.js for example.